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[57] ABSTRACT 

Methods and apparatus for encoding compressed data 



streams efficiently, and methods and apparatus for de- 
coding the encrypted data streams efHciently and inex- 
pensively, are disclosed. In an encoder 10', an incoming 
data stream is fed to a Huffman coding block 10 that 
performs data compression. The output codewords of 
the Huffman coding block are fed to a forward error 
correction block 30, the output of which is a series of 
data blocks and associated parity data. The data blocks 
are fed to an error insertion block 32, which inserts a 
one-bit error in each data block. The parity data is fed to 
a first encryption block 34 that produces encrypted 
parity data. The output of the error insertion block 32, 
the encrypted parity data, and a synchronization word 
output by a sync generator 50 are fed to a multiplexer 
48. A seed generator block 36 generates random num- 
bers for use by the first encryption block 34 as seeds for 
encrypting the parity data. A multisession key register 
40 stores a multisession key employed as a seed in a 
second encryption block 38 to encrypt the random 
number seed. A secret serial number (SSN) read from a 
database 46 and stored in an SSN register 44 is em- 
ployed by a third encryption block 42 as a seed for 
encrypting the multisession key. The multiplexer out- 
puts a multiplex comprising the sync signal, SOP, ADP, 
and Reed-Solomon data blocks with their correspond- 
ing parity data. A decoder 14' receives the multiplex 
data and recovers the original data. 
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gram data is represented by the sequence of numbers 18 

METHODS AND APPARATUS FOR SCRAMBLING at the input of the encoder 10 and the output of the 

AND UNSCRAMBLING COMPRESSED DATA decoder 14. The compressed data (sequence of code- 

STREAMS words) is represented by the sequence of bit patterns 20. 

5 Huffman coding is a variable length coding (VLC) 

FIELD OF THE INVENTION process that encodes frequent events with fewer bits 

The present invention relates generally to the fields of ^* encodes infrequent events. As iUustrated is the 

data compression and data encryption. More particu- following table (which is also shown in FIG. 1), vaii- 

larly, the present invention relates to methods and appa- length codewords are preassigncd to the symbols 

ratus for encrypting, or scrambling, digital data com- representable in the system in accordance with a Huff- 
pressed into variable length codewords. The invention 
may advantageously be applied in digital video and 
audio systems to provide efficient and inexpensive en- 
cryption and decryption. 



BACKGROUND OF THE INVENTION 



15 



man code. 


HUFFMAN 


TABLE 


Symbol 


Codeword 


0 


0 


-1 


100 


-2 


101 


+2 


no 


-3 


inoo 


+ 1 


11101 


+7 


11110 



The background of the present invention is described 
herein in the context of pay television systems, such as 
ciable television and direct broadcast satellite (DBS) 
systems, that distribute a variety of program services to 20 
subscribers, but the invention is by no means limited 
thereto except as expressly set forth in the accompany- 
ing claims. , . , . ^ ^ In a digital video system, identical code books, typi- 

In the pay television mdustry. programmers produce ^aliy stored in read only memory, are employed at the 
programs for distnbution to various remote locations. A 25 ^^^^^ ^^^^^^ locations. TTie decoder is able 
program may consist of video, audio, and other re- j^e received codewords to perform the 

lated services, such as closed-captioning and teletext decompression process, despite the fact th^ the code- 

^^^^n^Ti'^ci'^^^^^^^^^ ^^P^'' words Le of v^Siable lengths, because only prescribed 

services via satelhte to mdividual subscnbers and/or «^u^u .ii«„,*j ' i -r^v u-; KrtiArtimti 

cable television operators. In the case of cable television 30 

operators, the services transmitted via satellite are re- received, the decoder would be aWe to separa e 

ceived at the operator's cable head<nd installations, A ^IJ.'^^^'iL^fX^^^ "''^ '^l codewords "0", 

cable operator typically receives programs and other . * , ' TypicaUy, a synchronization pattern 

services from many programmers and then selects the ^ employed to separate large groups of codewords, 

programs/services it wishes to distribute to its subscrib- 35 P°?*^f y«» "^^^^^^ ^till must be able to separate the 

ers. In addition, a cable operator may insert locally individual codewords between the synchronization 

produced services at the cable-head end. The selected patterns. 

services and locally produced services arc then trans- ™ efficient compression is obtained 

mitted to the individual subscribers via a coaxial cable variable length coding (VLC) is used. However, 

distribution network. In the case of DBS subscribers, 40 because of the variable codeword lengths, if a single bit 

each subscriber is capable of receiving a satellite down- error occurs, the Huffman decoder will lose synchroni- 

link from the programmers directly. zation and be unable to recover any daU following the 

In the past, pay television systems, including cable error. For example, if the data stream •*0100101" were 

and DBS systems, have operated in the analog domain. changed to **1 100101" due to an erroneous inversion of 

Recently, however, the pay television industry has 45 ^c first bit, the decoder would be unable to decide 

begun to move toward all digital systems wherein, prior whether the received data stream should be interpreted 

to transmission, all analog signals are converted to digi- ^ "1100", "101" (two distinct codewords), or "1 10", 

tal signals. Digital signal transmission offers the advan- "lOJ" (three distinct codewords). In view of the 

tage that digital data can be processed at both the trans- problems associated with decoding variable length 

mission and reception ends to improve picture quality. 50 codewords in most real world environments, where bit 

Further, digital data compression techniques have been errors are likely, forward error correction (FEC) 

developed that achieve high signal compression ratios. should be employed to detect and correct errors before 

Digital compression allows a larger number of individ- Huffman coding is performed. For example, the Reed- 

ual services to be transmitted within a fixed bandwidth. Solomon algorithm is a well known FEC technique 

Bandwidth limitations are imposed by both satellite 55 whereby parity data is computed and transmitted with 

Uansponders and coaxial cable distribution networks, data blocks of a prescribed length. The parity data ena- 

and therefore digital compression is extremely advanta- blcs the decoder to detect and correct errors in the 

geous. Further background on digital television can be codewords before decompressing the codewords to 

found in U.S. patent application Ser. No. 968,g46, Oct recover the original data. 

30, 1992, titied System and Method for Transmitting a 60 Theft is also a serious problem in the pay television 

Plurality qf Digital Services, which is hereby incorpo- worid. Thieves have been known to illegally decode 

rated by reference as if fully set forth herein. program data with home made or stolen decoders. 

FIG. 1 schematically depicts a portion of a digital Highly sophisticated encryption techniques for scram- 

television system. This system comprises an encoder 10, bling the program data before it is distributed to cable 

a digital channel 12, and a decoder 14. The encoder and 65 television operators and individual subscribers are 

decoder each have access to identical Huffman lookup known. For example, the Data Encryption Standard 

Ubles (or code books) 16 for use in compressing and (DES), described in NBS, Data Encryption Standard 

decompressing digital program data. Exemplary pro- (FIPS Publication 46), National Bureau of Standards, 
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U.S. Deputment of Commerce, Wuhington, D.C third decryption means, and the means for storing an 
(January. 1977)), and the Ri vest-Shamir- Adleman SSN, are embodied in a secure microprocessor, making 
(RSA) scheme, described in R. L. Rivcst, A. Shamir, it extremely diflicult for an unauthorircd person to 
and L. Adleman, A Method of Obtaining Digital Signa- discover the SSN and decryption processes. 
turts and Public-key Cryptosystems, Communications of 3 The present invention also provides methods and 
the ACM 21(2). pp. 120-126 (February, 1978)). arc well apparatus for decoding the encrypted data. According 
known. However, decryption of high speed daU re- to the invention, a decoder receives an incoming data 
quires complex, specially designed circuitry, usually in , stream and demultiplexes the data stream into variable 
the form of application spcdfic integrated circuiU (AS- length codewords representing a compressed dato 
ICs). The ASICs are expensive but are needed to per- 10 stream, encrypted parity data, a system daU packet 
form decryption rapidly, in real time. Therefore, the (SDP) defining an encrypted seed, and an addressable 
benefit gained by employing encryption to deter pro- data packet (ADP) defining an encrypted multisession 
gruD theft is offset by the cost incurred by the decryp- key. The ADP is then decrypted to derive the multises- 
tion circuitry. »on key; the SDP is decrypted in accordance with the 

Accordingly, a primary goal of the present invention 15 multisession key to derive the seed; the parity daU is 
is to provide methods and apparatus for encrypting decrypted in accordance with the seed; errors in the 
digital daU streams in a manner that enables decryption codewords are corrected in accordance with the dc- 
in real time with inexpensive hardware. cryptcd parity data; and a decompressed daU stream is 

generated in accordance with the coaected codewords. 
SUMMARY OF THE INVENTION preferred embodiments of the invention, a 

The present invention provides methods and appara- deliberate error is added to the Huffman codewords in 
tus for encoding compressed data streams efficiently, the encoder and the associated FEC parity bytes arc 
and methods and apparatus for decoding the encrypted encrypted. The parity bytes arc much smaller than the 
dau streams efficiently and inexpensively. Methods for coded daU, and thus can be decrypted off-line in a 
encoding data in accordance with the present invention 25 microprocessor. Consequently, decryption of high- 
comprise the steps of: compressing an incoming data speed program daU is accomplished effectively by 
stream into variable length codewords; generating error background decryption of the FEC parity bytes, en- 
correction parity daU for the codewords; introducing abling the FEC means in the decoder to correct the 
an error into the codewords; encrypting the parity data; deliberate error. The present invention simplifies en- 
and transmitting the codewords and encrypted parity 30 cryption and decryption of high-speed program data by 

employing the FEC system and hardware, which is 

A preferred embodiment of the present invention typically used for correction of noise-induced errors, 
further comprises the steps of generating a seed for for an additional purpose: to provide conditional access 
encrypting the parity data, encrypting the seed, and to the program date. Off-line (or background, or non- 
transmitting the encrypted seed as a system date packet 35 real time) hardware can be used to perform real time 

decryption of the high-speed program date. Decoder 

In addition, embodiments of the invention may in- cost may therefore be significantly reduced. Other fea- 
cludc the steps of employing a multisession key to en- tures and advanuges of the present invention are de- 
crypt the seed, encrypting the multisession key. and closed below. 

uansmitting the encrypted multisession key as an ad- 40 ^j^j^p DESCRIPTION OF THE DRAWINGS 
dressable data packet (ADP). , . , , 

Embodiments of the invention may also include the FIG. 1 is a schematic represenution of a digital tele- 
step of employing a secret serial number (SSN) to en- vision system comprising an encoder 10. a digital chan- 
crypt the multisession key. nel 12, and a decoder 14. 

The encrypted parity data may advantageously be 45 FIG. 2 is a block diagram of an encoder 10 m accor- 
transmitted before the codewords are transmitted. This dance with the present invention, 
provides the decoder more time to decrypt the parity FIG. 3 is a block diagram of a decoder 14' in accor- 
data, and is useful in that the decrypted parity date is dance with the present invention, 
required by the decoder when correcting the deliberate OETAILED DESCRIPTION OF PREFERRED 
error in the program dato. In addiuon, the step of gener- 50 EMBODIMENTS 
ating error correction parity date may advanugeously 

employ a Reed-Solomon forward error conection pro- FIG. 2 schematically depicts one embodunent of an 
cess, whereby parity words and associated date blocks encoder 10' in accordance with the present bvention. 
are generated. The step of encrypting the parity date As shown, an incoming date stream is fed to a Huffman 
may comprise inserting one error per Reed-Solomon 55 coding block 10 that perfonns date compression. The 
date block, and the step of compressing an incoming output codewords of the Huffman coding block are fed 
date stream into variable length codewords may em- to a Reed-Solomon forward error correction block 30, 
ploy Huffman coding to generate variable length Huff- the output of which is a series of date blocks and associ- 
man codewords. *ted parity date. The date blocks are fed to an error 

Preferred embodimenU may also include the steps of 60 insertion block 32, which inserts a one-bit error in each 
generating a synchroniiation word; multipJexing the date block. The parity date is fed to a first encryption 
synchronization word with the codewords and en- block 34 that employs a known encryption algorithm, 
crypted parity date before transmitting the codewords e.g., the DES algorithm, to produce encrypted panty 
and encrypted parity data; and transmitting the multi- date. The output of the error insertion block 33, the 
plexed date. 65 encrypted parity data, and a synchroniration word out- 

Thc present invention also provides encoders includ- put by a sync generator 50 arc fed to a multiplexer 4S. In 
ing means for carrying out the above-described meth- addition, a seed generator block 36 generates random 
ods. In one preferred embodiment, the first, second, and numbers for use by the first encryption block 34 as seeds 
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for encrypting the parity data. A multisession key regis- may introduce more than one error into the codewords 

tcr 40 stores a multisession key employed as a seed in a or introduce one or more errors into some but not all 

second encryption block 38 to encrypt the random codewords. It is understood, therefore, that the scope of 

number seed. The encrypted random number seed is protection of the following claims is not limited to the 

referred to herein as a system data packet (SDF). A S particular embodiments disclosed, but is broad enough 

secret serial number (SSN) read from a database 46 and to encompass all modifications which are within the 

stored in an SSN register 44 is employed by a third true scope and spirit of the invention, 

encryption block 42 as a seed for encrypting the mill- What is claimed is: 

tisession key. The encrypted multisession key output by 1. A method for encoding data, comprising the steps 

the third encryption block 42 is referred to herein as an 10 of: 

addressable data packet (ADP). As shown, the SDP (a) compressing an incoming data stream into vari- 

and ADP are also fed to the multiplexer 48. The multi- able length codewords; 

plexer outputs a multiplex comprismg the sync signal, (b) generatmg error correction parity data for said 

SDP, ADP, and Reed-Solomon data blocks with their codewords; 

corresponding parity data. In one example of the prcs- IS (c) introducing an error into said codewords; 

ent invention* the random number seed changes at a rate (d) encrypting said parity data; and 

of eight times per second; the multisession key is (e) transmitting said codewords and encrypted parity 

changed at a rate of one time per month; and the secret data. 

serial number is a fixed number stored in the database 2. A method for encoding data as recited in claim 1, 

46. There is a unique SSN for each authorized decoder 20 further comprising the steps of generating a seed for 

in the system. encrypting said parity data, encrypting said seed, and 

FIG. 3 schematically depicts one embodiment of a transmitting the encrypted seed as a system data packet 

decoder in accordance with the present invention. As (SDP). 

shown, multiplex data 52 is received and fed to a demul- 3. A method for encoding data as recited in claim 2, 

tiplexer 54, which separates out the Huffman data, en- 25 further comprising the steps of employing a multiscs- 

coded parity data, SDP, and ADP. The Huffman data sion key to encrypt said seed, encrypting said multises- 

blocks are fed to a Reed-Solomon FEC block 56, which sion key, and transmitting the encrypted multisession 

outputs corrected Huffman data. Since the FEC block key as an addressable data packet (ADP). 

56 requires decrypted parity data to perform error cor- 4. A method for encoding data as recited in claim 3, 

rection on the program data, the encrypted parity data 30 comprising the step of employing a secret serial number 

is fed to a first decryption block 58, which decrypts the (SSN) to encrypt said multisession key. 

parity data in accordance with the decryption process 5. A method for encoding dau as recited in claim 1, 

corresponding to the encryption process employed by wherein said encrypted parity data is transmitted before 

the encoder. The first decryption block 58 employs the said codewords are transmitted, 

random number seed generated by the random number 35 6; A method for encoding data as recited in claim 1, 

generator of the encoder. Thus, the SDP (which is the wherein the step of generating error correction parity 

encrypted version of the random number seed) roust data comprises employing a Reed-Solomon forward 

also be decrypted to obtain the random number seed. error correction process, whereby parity words and 

To decrypt the SDP, the ADP is decrypted to produce associated data blocks are generated; and the step of 
the multisession key, the latter being employed as a seed 40 encrypting said parity data comprises inserting at least 

in a second decryption block 60. The ADP is decrypted one error per data, block. 

by employing the decoder's secret serial number, which 7. A method for encoding data as recited in claim 1. 
is stored in memory 64 inside the decoder, as a seed for wherein the step of compressing an incoming data 
a third decryption block 62. The output of the Reed- stream into variable length codewords comprises em- 
Solomon FEC block 56 is a series of compressed but 45 ploying Huffman coding to generate variable length 
corrected Huffman codewords. The corrected Huffman Huffman codewords. 

codewords are fed to a Huffman decoder 14, which 8. A method for encoding data as recited in claim 1, 

employs a lookup table 16 to produce the original com- comprising the steps of generating a synchronization 

pressed data. word; multiplexing said synchronization word with said 

In preferred embodiments of the invention, the first, 50 codewords and encrypted parity data before transmit- 
second and third decryption blocks, as well as the de- ting said codewords and encrypted parity data; and 
coder's secret serial nimiber, are embodied in a secure transmitting the multiplexed data, 
microprocessor, for example, a Motorola SC21 or SC27 9. A method for encoding data as recited in claim 1, 
secure microprocessor. Such a microprocessor has a f\irther comprising the steps of: generating a seed for 
limited number of pins (e.g., six) and employs extraordi- 55 encrypting said parity data; encrypting said seed by 
nary measures to prevent an unauthorized person from employing a multisession key; encrypting said multises- 
discovering the SSN or the decryption procedures em- sion key by employing a secret serial number (SSN); 
ployed in the decoder. generating a synchronization word; multiplexing said 

It will be appreciated by those skilled in the art that synchronization word, codewords, encrypted parity 
changes could be made to the embodiments described 60 data, encrypted seed, and encrypted multisession key, 
herein without departing from the inventive concepts before transmittmg said codewords and encrypted par- 
thereof. For example, the present invention is not lim- ity data; and transmitting the multiplexed data, 
ited to systems employing any particular encryption 10. A method for encoding data as recited in claim 9, 
technique (e.g., DES) or compression technique (e.g., wherein the step of generating error correction parity 
Huffman coding), although the invention is especially 65 data comprises employing a Reed-Solomon forward 
well suited for systems employing variable length cod- error correction process, whereby parity words and 
ing, since the latter systems must employ forward error associated data blocks are generated; the step of en- 
correction. In addition, embodiments of the invention crypting said parity data comprises inserting at least one 
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error per data block; and the step of compressing an 
incoming data stream into variable length codewords 
comprises employing Huffman coding to generate vari- 
able length HulTman codewords. 
11. An apparatus for encoding data, comprising: 

(a) means for compressing an incoming data stream 
into variable length codewords; 

(b) means for generating error correction parity data 
for said codewords; 

(c) means for introducing an error into said code- 
words; 

(d) means for encrypting said parity data; and 

(e) mevis for tranunitting said codewords and en- 
crypted parity data. 

U. An apparatus for encoding data as recited in claim 
11, further comprising means for generating a seed for 
encrypting said parity data, means for encrypting said 
teed, and means for transmitting the encrypted seed as 
a system daU packet (SDP). 

13. An apparatus for encoding data as recited in claim 
U, further comprising means for employing a multises- 
sion key to encrypt said seed, means for encrypting said 
multisession key, and means for transmitting the en- 
crypted multisession key as an addressable data packet 
(ADP). 

14. An apparatus for encoding data as recited in claim 
13, comprising means for employing a secret serial num- 
ber (SSN) to encrypt said multisession key. 

15. An apparatus for encoding data as recited in claim 
11, comprising means for transmitting said encrypted 30 
parity data before transmitting said codewords. 

16. An apparatus for encoding data as recited in claim 
11, wherein the means for generating error correction 
parity data comprises means for employing a Reed- 
Solomon forward error correction process, whereby 
parity words and associated data blocks arc generated; 
and the means for encrypting said parity data comprises 
means for inserting at least one error per data block. 

17. An apparatus for encoding data as recited in claim 
11, wherein the means for compressing an incoming 40 
dau stream into variable length codewords comprises 
means for employing Huffman coding to generate vari- 
able length Huffman codewords. 

18. An apparatus for encoding data as recited in claim 
11, comprising means for generating a synchronization 45 
word; means for multiplexing said synchronization 
word with said codewords and encrypted parity data 
before transmitting said codewords and encrypted par- 
ity data; and means for transmitting the multiplexed 
data. 

19. An apparatus for encoding data as recited in claim 
11, further comprising: means for. generating a seed for 
encrypting said parity data; means for encrypting said 
seed by employing a multisession key; means for en- 
crypting said multisession key by employing a secret 
serial number (SSN); means for generating a synchroni- 
zation word; means for multiplexing said synchroniza- 
tion word, codewords, encrypted parity data, en- 
crypted seed, and encrypted multisession key, before 
transmitting said codewords and encrypted parity data; HO 
and means for transmitting the multiplexed data. 

70. An apparatus for encoding data as recited in claim 
19, wherein the means for generating error correction 
parity data comprises means for employing a Reed- 
Solomon forward error correction process, whereby 65 
parity words and associated data blocks are generated; 
the means for encrypting said parity data comprises 
means for inserting one error per data block; and the 
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means for compressing an incoming data stream into 
variable length codewords comprises means for em- 
ploying Huffman coding to generate variable length 
Huffman codewords. 

21. An apparatus for decoding data, comprising: 

(a) demultiplexer means for receiving an incoming 
data stream and demultiplexing said data stream 
into variable length codewords representing a 
compressed data stream, encrypted parity data, a 
system dau packet (SDP) defming an encrypted 
seed, and an addressable data packet (ADP) defin- 
ing an encrypted multisession key; 

(b) first decryption means for decrypting said ADP to 
derive said multisession key; 

(c) second decryption means for decrypting said SDP 
in accordance with said multisession key to derive 
said seed; 

(d) third decryption means for decrypting said parity 
data in accordance with said seed; 

(e) error correction means for correcting errors in 
said codewords in accordance with the decrypted 
parity data; and 

(0 decompression means for generating a decom- 
pressed data stream in accordance with the cor- 
rected codewords. 

22. An apparatus for decoding dau as recited in claim 

21, further comprising means, coupled to said first de- 
cryption means, for storing a secret serial number (SSN) 
for use in decrypting said ADP. 

23. An apparatus for decoding daU as recited in claim 

22, wherein said first, second, and third decryption 
means, and said means for storing an SSN, are embodied 
in a secure microprocessor. 

24. An apparatus for decoding daU as recited in claim 
21, wherein said decompression means comprises a 
Huffman decoder and a look up Ublc. 

25. An apparatus for decoding daU as recited in claim 
21, wherein said error correction means comprises 
means for employing a Reed-Solomon forward error 
correction process to correct errors in said codewords. 

26. An apparatus for decoding daU as recited in claim 

23, wherein said decompression means comprises a 
Huffman decoder and a look up Uble; and said error 
correction means comprises means for employing a 
Reed-Solomon forward error correction process to 
correct errors in said codewords. 

27. A method for decoding data, comprising the steps 
of: 

(a) receiving an incoming daU stream and demulti- 
plexing said daU stream into variable length code- 
words representing a compressed daU stream, en- 
crypted parity daU, a system daU packet (SDP) 
defining an encrypted seed, and an addressable data 
packet (ADP) defining an encrypted multisession 
key; 

(b) decrypting said ADP to derive said multisession 
key; 

(c) decrypting said SDP in accordance with said 
multisession key to derive said seed; 

(d) decrypting said parity dau in accordance with 
said seeid; 

(e) correcting erron in said codewords in accordance 
with the decrypted parity data; and 

(0 generating a decompressed data stream in accor- 
dance with the corrected codewords. 

28. A method for decoding daU as recited in claim 27, 
comprising employing a secret serial number (SSN) to 
decrypt said ADP. 
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29. A method for decoding data as recited in claim 21, 
wherein the step of generating a decompressed data 
stream comprises employing a Huffman look up table to 
decompress said codewords. 

30. A method for decoding data as recited in claim 27, 
wherein the step of correcting errors in said codewords 
comprises employing a Reed*Solomon forward error 
correction process to correct said errors. 

31 A method for decoding data as recited in claim 27, 



10 



wherein the step of generating a decompressed data 
stream comprises employing a Huffman look up Uble to 
decompress said codewords; and the step of correcting 
errors in said codewords comprises employing a Reed- 
Solomon forward error correction process to correct 
said errors. 
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